V3 deterministic GitHub Actions workflow lint capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local actionlint CLI ingredient exposes bounded project operations for readiness and GitHub Actions workflow lint diagnostics. Lints run from an explicit project directory cwd supplied at execution time, check one trusted local GitHub Actions workflow YAML file, and return JSON diagnostics via the github_actions.workflow_lint catalog operation. Fixed-function and reproducible: no arbitrary actionlint flags, no caller-supplied config path, no shell wrapper, no Docker image, no workflow execution, and no network egress. ShellCheck and Pyflakes integrations are disabled so the pack depends only on actionlint and never spawns secondary linters. Findings are represented as JSON output instead of failing the op; real invocation errors still fail. Requires actionlint on PATH. Local and no-egress.